Use unique passphrases and passwords to protect yourself online
Strong passwords are one among the various ways to protect your privacy online. In this article, we will be discussing how to create a strong password or passphrase that you’ll remember and no one else can guess.
What Actually Is a Strong Password?
A strong password for your online accounts must be:
- Purely haphazard or random choices (remember, when the password contains words that makes sense, then it will be more easier to crack it)
- No shorter than 17 characters
- Different for each and every online account you have
- Changed every 90 days (which is a recommended password changing interval by many cyber security experts, but there is no hard and fast rule that the 90 days rule holds true in all cases. You can change passwords in even shorter intervals, take a month or even a week, but it will be hectic and troublesome to remember to change the password and note it down safely, but it is worthwhile to protect yourself against possible password cracking)
The below mentioned are some password practices that you should avoid:
- Don’t use the typical format of “word + number”.
- Don’t include personal information that is publicly available, such as your birthday.
- Don’t use common substitutions and shorthand (such as using “@” for the letter “a”, or “!” for the letter “i”, or “$” for the letter “S”).
Bonus: Lifewire.com suggests Some Examples of Strong Password
And… What Is a Passphrase Then?
While most of the passwords are combinations of numbers, letters, and symbols, a passphrase consists of randomly combined words. For example:
silentmelodycosmicharvestwhisper
Protecting your online accounts starts with a strong password, but for ultimate security, consider a passphrase. Passphrases are easier to remember than complex passwords because they use multiple words. Think of them like a short, random sentence. This makes them much harder for hackers to guess, even with dictionary attacks. To maximize security, use at least five unrelated words and avoid any existing phrases. This simple switch can significantly boost your online safety.
Passphrase and Password Generators
To make sure the words you pick are genuinely random, you can use a free passphrase generator like Diceware or Secure Passphrase Generator. For a generation of random letters and numbers, use Norton Password Generator or the Avast Random Password Generator.
Noawadys, many online accounts have specific password requirements, which may require you to add numbers, special characters, or a mix of uppercase and lowercase letters.
How to Memorize Your Passwords
Using easy-to-remember information like your birthday or the year you graduated from high school, or your anniversary date, your pet’s name, your nickname, etc. is highly discouraged. If you have trouble remembering the passphrases, you can use another strategy to create an acronym out of a sentence. For example, “First Trip Abroad 2019, Eiffel Tower Sparkled” can translate into:
France2019EiffelSparkle
Generally, it’s not a good idea to write down your passwords; however, you can write down the phrase as a reminder, and no one will know what it means even if they find it.
Set Up a Password Manager
Juggling unique passwords for every online account can feel overwhelming. But fret not! Password managers are your secret weapon. These secure applications store your login credentials, eliminating the need to remember them all. This way, you can create strong, unique passwords for every account without the memorization struggle.
In this way, by using a primary password for a password manager, you can access any of your accounts. Many top password managers also include built-in password generators.
Try this: If you want to know the strength of your password, use a password checker like Password Strength Meter.
Multi-factor Authentication
No matter how strong your password is, it’s always wise to enable two-factor authentication (2FA) to secure your online accounts whenever possible.
Enabling 2FA for services like Gmail means you’ll receive a verification code via text or email each time you log in. Many email providers, financial services, and an increasing number of websites that handle personal information, such as social media platforms, offer some form of 2FA.
Additionally, you should use strong passwords for all your devices, particularly those you carry in public. Most operating systems now support biometric verification. For instance, Windows Hello uses facial recognition, and Apple Touch ID employs a fingerprint scanner for authentication.
Why Are Strong Passwords Important?
Strong passwords are essential for protecting your online accounts and personal information from hackers. If someone gains access to your email password, they can uncover sensitive details about your life, such as your banking information, place of work, and home address. This information can also be used to reset passwords for other online accounts. Hackers often sell stolen passwords on the dark web for malicious purposes.
Hackers employ various techniques to steal passwords, including:
- Brute force attacks: Automated software guesses passwords by trying every possible combination of characters.
- Dictionary attacks: Similar to brute force attacks, these use common word combinations to guess passwords.
- Phishing: Hackers trick users into providing their passwords through deceptive emails, robocalls, or misleading links.
- Credential recycling: Hackers use stolen usernames and passwords from one account to try to access other accounts.
What to Do If Your Passwords Are Compromised
If you suspect any of your passwords has been compromised:
- Create a new, stronger password.
- Change the passwords of any related accounts.
- Update your account recovery information.
- Monitor your financial accounts for any unauthorized transactions.
How to Know if Your Password Was Compromised
Even if you are careful, your usernames and passwords can still be exposed due to data breaches at large companies, such as Facebook or Sony.
To check if your credentials have been compromised, use a service like Avast Hack Check. If you find that your email address has been involved in a breach, promptly change the passwords for all associated accounts.
